[Bug 43100] New: Release key overwrite

https://bugs.winehq.org/show_bug.cgi?id=43100

Bug ID: 43100
           Summary: Release key overwrite
           Product: Packaging
           Version: unspecified
          Hardware: x86
                OS: Linux
            Status: UNCONFIRMED
          Severity: normal
          Priority: P2
         Component: wine-packages
          Assignee: [e-mail]
          Reporter: [e-mail]
                CC: [e-mail], [e-mail]
      Distribution: ---

I got the following error message from my package manager Synaptic:

"W: GPG-Fehler: https://dl.winehq.org/wine-builds/ubuntu xenial InRelease: Die
folgenden Signaturen konnten nicht überprüft werden, weil ihr öffentlicher
Schlüssel nicht verfügbar ist: NO_PUBKEY 818A435C5FCBF54A
W: The repository 'https://dl.winehq.org/wine-builds/ubuntu xenial InRelease'
is not signed."

I followed the instructions from the wine manual, however 
wget https://dl.winehq.org/wine-builds/Release.key

saved as Release.key.3 as the file was preexisting.

According to the wget manual:
"When running Wget without ‘-N’, ‘-nc’, ‘-r’, or ‘-p’, downloading the same
file in the same directory will result in the original copy of file being
preserved and the second copy being named ‘file.1’. If that file is downloaded
yet again, the third copy will be named ‘file.2’, and so on. "

I recommend to change the phrase in the documentation

https://wiki.winehq.org/Ubuntu

to:

wget -nc https://dl.winehq.org/wine-builds/Release.key

or rename the Release.key file as 818A435C5FCBF54A.key so there won't be any
overlap with other release keys you previously downloaded. Furthermore it makes
sense to delete the downloaded key after adding it successfully.

[Bug 43100] Release key overwrite

https://bugs.winehq.org/show_bug.cgi?id=43100

--- Comment #1 from Sebastian Lackner  ---
Thanks for the bug report. I've already added "-nc" to wget in the Ubuntu and
Debian installation instructions, however the best solution would be to avoid
any temporary files. Would it maybe be better to write it like:

wget -O- https://dl.winehq.org/wine-builds/Release.key | sudo apt-key add -

Or maybe, rely on "apt-key adv" to fetch the keys from a keyserver? Of course
we should make sure that the method works for all currently supported distro
versions. Suggestions are welcome.

[Bug 43100] Release key overwrite

https://bugs.winehq.org/show_bug.cgi?id=43100

Rosanne DiMesio  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
         Resolution|---                         |FIXED
             Status|UNCONFIRMED                 |RESOLVED

--- Comment #2 from Rosanne DiMesio  ---
This was fixed long ago.

[Bug 43100] Release key overwrite

https://bugs.winehq.org/show_bug.cgi?id=43100

Rosanne DiMesio  changed:

What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |CLOSED

--- Comment #3 from Rosanne DiMesio  ---
Closing fixed packaging bug.